CISSP Information Systems Security

Answer: C - Business continuity and disaster recovery plans should not be kept in a file cabinet. There should be several copies of the plans. One copy should be at the primary location, while the other copies are kept off the premises to avoid all of the copies from being destroyed if a disaster strikes the primary building. Another copy can be kept at the redundant site if stored in a fireproof safe, not a file cabinet. And one copy is usually kept at the BCP coordinator’s home.